General

  • Target

    4b85b59742fcde4debd7c3fe58d20920_NeikiAnalytics.exe

  • Size

    72KB

  • Sample

    240526-b5cvbsba78

  • MD5

    4b85b59742fcde4debd7c3fe58d20920

  • SHA1

    5bf06021e87a03df7b20d7100dac7890d772c02f

  • SHA256

    7a439b07a99c6c48ad86f4fae7bd8ab65a7c47d8e720d1793990530550099bc1

  • SHA512

    32f91e7b09a243400d9499d9eed1825b5d8857c9b842a65cf3d8f01222fb9201b01059dbbfc7af422210eae5c4b5fd1bc40d0a97b793d5956390baedde4c441d

  • SSDEEP

    1536:I5nYWW9vdqLGZR2lBUFQbuYqk/c2gGPMb+KR0Nc8QsJq39:wCd89Q+t9e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

80.37.226.176:40555

Targets

    • Target

      4b85b59742fcde4debd7c3fe58d20920_NeikiAnalytics.exe

    • Size

      72KB

    • MD5

      4b85b59742fcde4debd7c3fe58d20920

    • SHA1

      5bf06021e87a03df7b20d7100dac7890d772c02f

    • SHA256

      7a439b07a99c6c48ad86f4fae7bd8ab65a7c47d8e720d1793990530550099bc1

    • SHA512

      32f91e7b09a243400d9499d9eed1825b5d8857c9b842a65cf3d8f01222fb9201b01059dbbfc7af422210eae5c4b5fd1bc40d0a97b793d5956390baedde4c441d

    • SSDEEP

      1536:I5nYWW9vdqLGZR2lBUFQbuYqk/c2gGPMb+KR0Nc8QsJq39:wCd89Q+t9e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks